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Top Stories 

• Honda announced December 3 that it will expand its recall of vehicles equipped with 
airbags manufactured by Takata to include all 50 States due to the potential for the airbag 
inflators to shatter and send shrapnel into vehicles’ cabins. - Washington Post (See item 4) 

• A fire at the American Appliance Factory in Newport, Tennessee, December 3 caused 
around $1 million in damage and stopped work at the facility. - WVLT 8 Knoxville (See 
item 5) 

• A U.S. Department of Justice’s Office of the Inspector General report found that a former- 
operator of the FEBG Bond Fund operated the fund as a Ponzi scheme that defrauded 
around 130 individuals of over $30 million. -Tribune News Service (See item 7) 

• Eight workers at a U.S. Postal Service processing center in Bethpage, New York, were 
charged December 3 for allegedly stealing illegal shipments of marijuana and conspiring to 
deal the drugs which held an estimated street value of up to $930,000. - New York Daily 
News (See item 12) 
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Energy Sector 



1. December 4, New Orleans Times -Picayune - (Louisiana) BP oil spill claims adjuster 
pleads guilty to $257,400 wire fraud. A former LaPlace adjuster for the Gulf Coast 
Claims Facility pleaded guilty December 3 to filing 6 fraudulent claims totaling 
$257,400 in exchange for keeping $30,000 for individuals who were not impacted by 
the 2010 BP oil spill. The former adjuster recruited people to pose as commercial 
fishing workers who lost their jobs or income due to the spill in order to file the false 
claims. 

Source: 

http://www.nola.com/crime/index.ssf/2014/12/bp oil spill claims adjuster pleads gui 
lty to 257400 wire fraud.html 

For another story, see item 34 



T Return to top i 



Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

2. December 3, San Luis Obispo Tribune - (California) NRC tentatively downgrades 
safety designation at Diablo Canyon. The U.S. Nuclear Regulatory Commission 
informed the operators of the Diablo Canyon nuclear power plant the week of 
December 1 that it was tentatively downgrading the plant’s safety designation from 
‘green’ to ‘white’ due to unauthorized changes in the plant’s emergency warning 
procedures for boats 5-10 miles offshore. 

Source: http://www.sanluisobispo.com/2014/12/03/3379873 diablo-canyon-safety- 
designation.html 

3. December 3, Associated Press - (Missouri) Missouri nuclear plant shuts down; no 
public risk. The Callaway nuclear power plant near Fulton experienced an unplanned 
shutdown December 3 due to an electrical equipment failure. The cause of the 
shutdown was being investigated and posed no threat to the public or electrical power 
distribution. 

Source: http://abcnews.go.com/US/wireStorv/missouri-nuclear-plant-shuts-public-risk- 
27344046 
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Critical Manufacturing Sector 

4. December 3, Washington Post - (National) Honda expands Takata air bag recall to 
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all 50 states. Honda announced December 3 that it will expand its recall of vehicles 
equipped with airbags manufactured by Takata to include all 50 States due to the 
potential for the airbag inflators to shatter and send shrapnel into vehicles’ cabins. The 
announcement could result in the recall of several million vehicles. 

Source: http://www.washingtonpost.com/local/trafficandcommuting/honda-expands- 
takata-air-bag-recall-to-all-50-states/2014/12/03/e2c9e3f4-7bl4-lle4-b821- 
503cc7efed9e story.html 

5. December 3, WVLT 8 Knoxville - (Tennessee) Fire shuts down work at Newport 
factory. A fire at the American Appliance Factory in Newport, Tennessee, December 3 
caused around $1 million in damage and stopped work at the facility. The fire was 
believed to have started in a paint room at the factory. 

Source: http://www.local8now.com/home/headlines/Fire-shuts-down-work-at- 
Newport-factory-284662001.html 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. December 4, Softpedia - (International) Critical PayPal bug left all accounts 
vulnerable to hijacking. A security researcher identified and reported a cross-site 
request forgery (CSRF) vulnerability that could have been used with other flaws to 
allow an attacker to link their email address to a victim’s account by capturing a 
reusable authentication token that was valid for all PayPal accounts. The vulnerability 
was fixed by PayPal before the researcher publicly disclosed his findings, and the 
researcher was awarded $10,000 from PayPal’s Bug Bounty program. 

Source: http://news.softpedia.com/news/Critical-PayPal-Bug-Left-All-Accounts- 
Vulnerable-to-Hiiacking-466500.shtml 

7. December 3, Tribune News Service - (Florida) Investigation reveals how Florida 
man ripped off DEA. A report from the U.S. Department of Justice’s Office of the 
Inspector General found that a now-deceased Jacksonville man who ran the FEBG 
Bond Fund operated the fund as a Ponzi scheme that defrauded around 130 individuals 
of over $30 million, more than half of whom were current or former Drug Enforcement 
Agency (DEA) employees or connected to DEA employees. The report found that 
some DEA personnel exercised poor judgment in giving the man access to DEA 
personnel and facilities and receiving gifts from the man. 

Source: http://www.msn.com/en-us/news/other/investigation-reveals-how-florida-man- 
ripped-off-dea-agents/ar-BB gigCn 

8. December 3, Charlotte Observer - (North Carolina; South Carolina) Charlotte man 
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pleads guilty to role in Wax House scheme. A Charlotte, North Carolina man pleaded 
guilty December 3 for his role in the $75 million Operation Wax House mortgage and 
investment fraud scheme in North Carolina and South Carolina. The man was charged 
with laundering over $200,000 in loan proceeds through his Perry Masonry 
Construction company and for working as a promoter to recruit straw buyers. 

Source: http://www.charlotteobserver.com/2014/12/03/5359034/charlotte-man-pleads- 
guilty-to.html 
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Transportation Systems Sector 

9. December 4, WPVI 6 Philadelphia - (Pennsylvania) Construction worker struck and 
killed on Route 422 in Chester County. Route 422 West in North Coventry Township 
was shut down for 5 hours as authorities investigated after a construction worker was 
struck and killed by a vehicle while setting up traffic cones for a lane closure and line 
painting December 3. 

Source: http://6abc.com/news/construction-worker-struck-and-killed-on-chester-co- 
highway/421589/ 

10. December 3, WCBS 2 New York City - (New York) $20,000 in loot allegedly taken 
from checked luggage by JFK bag handlers. Seven bag handlers at John F. Kennedy 
International Airport in New York City were arrested December 3 and indicted for 
allegedly stealing electronics, jewelry, and other items from checked baggage at 
Terminals 4 and 7 between March 2012 and June 2014 with the total value of stolen 
goods estimated at over $20,000. 

Source: http://newvork.cbslocal.com/2014/12/03/7-jfk-bag-handlers-charged-with- 
stealing-iewelry-electronics-from-checked-luggage/ 

11. December 3, KRON 4 San Francisco - (California) Bad weather cancels more than 
100 flights at SFO. Strong winds and heavy rain prompted the cancellation of 1 12 
flights at San Francisco International Airport December 3. 

Source: http://news.kron4.com/news/more-than-100-flights-cancelled-at-sfo/ 

12. December 3, New York Daily News - (New York) Postal workers on Long Island 
busted for stealing pot packages. Eight workers at a U.S. Postal Service processing 
center in Bethpage were charged December 3 on federal charges for allegedly stealing 
illegal shipments of marijuana and conspiring to deal the drugs. Federal agents seized 
129 pounds of marijuana with an estimated street value of up to $930,000. 

Source: http://www.nvdailynews.com/new-vork/postal-workers-busted-stealing-pot- 
packages-article- 1 .2032179 
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Food and Agriculture Sector 

13. December 4, Columbia Daily Tribune - (Missouri) Fire department responds to 
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small blaze at Quaker Oats factory. Officials are investigating a December 3 fire at 
the PepsiCo-owned Quaker Oats production facility in Columbia, Missouri, that is 
believed to have started in a rice cake processing machine and was contained by an 
automatic sprinkler system that was activated during the blaze. The factory was 
evacuated and closed for about 2 hours, while one employee was treated at the scene 
for minor injuries. 

Source: http://www.columbiatribune.com/news/local/fire-department-responds-to- 
small-blaze-at-quaker-oats-factory/article 7d3d9664-0c39-5a96-8d95- 
3d366c3a6dc3.html 



14. December 3, Reuters - (Idaho) Idaho authorities seek missing cows amid rise in 
cattle rustling. Authorities are investigating after 66 cow-calf pairs, a total of 132 
animals, were reported missing from 2 grazing allotments near Idaho Falls during the 
week of December 1. The Idaho State Brand Inspector reported that while there is 
reason to believe the cattle may have been stolen there is a possibility that the animals 
may have roamed and joined herds grazing nearby and were inadvertently herded by 
other ranchers. 

Source: http://www.reuters.com/article/2014/12/Q4/us-usa-cattle-idaho- 
idUSKCN0JI01M20141204 



15. December 3, U.S. Food and Drug Administration - (National) Overhill Farms 
voluntarily recalls Open Nature Chile Cheese Enchiladas sold at Safeway stores 
nationwide due to possible Salmonella contamination. The U.S. Food and Drug 
Administration announced December 3 that Overhill Farms, Inc., issued a recall for its 
Open Nature Chile Cheese Enchiladas after a third party supplier informed the 
company that the organic cilantro contained in the frozen food product may be 
contaminated with Salmonella. The product was sold in 9-ounce packages at Safeway- 
owned stores nationwide between October 9 and December 1 . 

Source: http://www.fda.gov/Safety/Recalls/ucm425648.htm 

16. December 2, Racine County Journal Times - (Wisconsin) Grain bin corn flares up 
again. A fire broke out December 1 within the outside dryer portion of a grain bin at a 
farm in Mount Pleasant, Wisconsin, and caused between $30,000 and $50,000 in 
damage to the silo and the drying fan that was rendered a total loss. Firefighters 
returned to the scene December 2 after receiving reports of another corn fire flare-up 
where some of the corn in the drying floor needed to be cooled with water. 

Source: http://iournaltimes.com/news/local/grain-bin-com-flares-up- 
again/article 29bb25ee-7255-5535-b809-30b27ae606e2.html 

For another story, see item 38 
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Water and Wastewater Systems Sector 

17. December 3, KTLA 5 Los Angeles - (California) Ocean polluted by urban runoff 
from storm; beachgoers advised to avoid water. The Los Angeles County 
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Department of Public Health issued a rain advisory for all beaches in Orange County 
December 3 recommending beachgoers to avoid contact with the water for at least 72 
hours after ongoing rains end due to high levels of bacteria flowing in runoff water. 
Source: http://ktla.com/2014/12/03/ocean-polluted-by-urban-runoff-from-storm- 
beachgoers-advised-to-avoid-water/ 

18. December 2, MLive.com - (Michigan) 280 gallons of sanitary sewage discharged 
from manhole near Kalamazoo Approximately 280 gallons of sanitary sewage was 
discharged from a manhole east of downtown Kalamazoo December 2. The Michigan 
Department of Environmental Quality and Kalamazoo County Environmental Health 
and Community Service office were notified of the incident. 

Source: 

http://www.mlive.com/news/kalamazoo/index.ssf/2014/12/280 gallons of sanitary se 
wage.html 
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Healthcare and Public Health Sector 

19. December 3, KKCO 11 Grand Junction - (Colorado) Bed bugs force closure of VA 
clinic in Montrose. The Montrose Veterans Affairs Clinic in Colorado was closed for 
cleaning and extermination December 2 and will reopen December 5 after a patient 
with bed bugs was admitted to the clinic. Staff transferred the patient to a local hospital 
after noticing the bed bugs and began the decontamination process. 

Source: http://www.nbcllnews.com/home/headlines/Bed-Bugs-force-closure-of-VA- 
Clinic-in-Montrose-28467 1631 .html 

20. December 3, KSWB 69 San Diego - (National) Businessman pleads guilty to wire 
fraud. A businessman from San Diego pleaded guilty December 3 to bilking victims 
out of more than $200,000 by selling imaging and diagnostic systems that he failed to 
deliver or only partially provided through his two companies, Advance Functional 
Imaging and Green Screen Labs between 2007 and 2009. 

Source: http://fox5sandiego.com/2014/12/03/businessman-pleads-guiltv-to-wire-fraud/ 
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Government Facilities Sector 

21. December 4, Harrisburg Patriot-News - (Pennsylvania) Gas leak evacuates East 
Pennsboro Elementary School. Students were evacuated and classes were dismissed 
at East Pennsboro Elementary School in Pennsylvania December 4 due to a gas leak 
outside the building. 

Source: 

http://www.pennlive.com/midstate/index.ssf/2014/12/gas leak evacuates east pennsb. 
html 

22. December 3, Reuters - (Puerto Rico) FBI raids Puerto Rico highways authority, 
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arrests treasurer. The U.S. Attorney’s office reported that the treasurer of Puerto 
Rico’s Highways and Transportation Authority (HTA) was arrested by the FBI 
December 3 in connection to alleged bribery in programs using federal funds involving 
3 unnamed HTA contractors. 

Source: http://www.msn.com/en-us/news/crime/fbi-raids-puerto-rico-highwavs- 
authority-arrests-treasurer/ar-BBgixIL 

23. December 3, Birmingham News - (Alabama) Transformer explosion forces 
evacuation of UAB dental school. Classes and patient clinics at the University of 
Alabama at Birmingham’s School of Dentistry were cancelled December 3 following a 
transformer explosion that caused an evacuation when power was knocked out and 
smoke filled the building. 

Source: 

http://www.al.com/news/birmingham/index.ssf/2014/12/transformer explosion forces 
e.html 



24. December 3, KFOR 4 Oklahoma City - (Oklahoma) Crooked Oak Public Schools 
canceled today due to bus barn fire. Seven buses were damaged due to a fire in a bus 
bam in Oklahoma City prompting the cancellation of classes for Crooked Oak Public 
Schools December 3. Fire crews believe the fire began in front of one of the buses. 
Source: http://kfor.com/2014/12/03/crooked-oak-public-schools-canceled-today-due- 
to-bus-barn-fire/ 



25. December 2, NH1 News Network - (New Hampshire) Thousands of names, social 
security numbers of people getting unemployment in NH leaked. The New 
Hampshire State Employment Department reported December 2 that an internal 
computer error caused the personal information, including Social Security numbers and 
the amount of claimed benefits, of 2,700 unemployed individuals to be inadvertently 
distributed to about 1,100 employers. 

Source: http://www.nhl.com/news/thousands-of-names-social-security-numbers-of- 
people-getting-unemployment-in-nh-leaked/ 

For additional stories, see items 7 and 34 
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Emergency Services Sector 

26. December 3, Portsmouth Herald - (New Hampshire) Phone outages impact police 
departments. Service for several Portsmouth area police department phone lines, 
including the city’s 9-1-1 service, were down for 4 hours December 3 due to a network 
problem with FairPoint. Emergency calls were rerouted while crews repaired the issue. 
Source: http://www.seacoastonline.com/article/20 141 203/NEW S/141 20964 1 
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Information Technology Sector 



27. December 4, The Register - (International) Big Blue patches big blooper in Endpoint 
Manager for mobes. IBM released a patch for its Endpoint Manager for Mobile 
Devices product that allowed attackers to gain remote access and compromise mobile 
devices connected to the network. 

Source: http://www.theregister.co.uk/2014/12/04/ibm endpoint manager patch/ 

28. December 3, Softpedia - (International) Asprox operators have started recruiting for 
a larger botnet. Researchers with Malcovery found that the operators of the Asprox 
botnet began a campaign using spam emails purporting to be order confirmation from 
major retailers such as HomeDepot, WalMart, CostCo, and Target in order to infect 
more users and expand the Asprox botnet. 

Source: http://news.softpedia.com/news/Asprox-Operators-Have-Started-Recruiting- 
For-a-Larger-Botnet-466482.shtml 

29. December 3, Softpedia - (International) Vulnerability in WhatsApp leads to losing 
conversations. Two security researchers reported and released a proof-of-concept 
(PoC) for a flaw in WhatsApp where an attacker could send a 2KB text containing 
special characters that would cause the app to crash unless the conversation thread is 
deleted. The researchers stated that the app affects WhatsApp versions 2.1 1.431 and 
2.11.432 on Android devices. 

Source: http://news.softpedia.com/news/Yulnerability-in-WhatsApp-Leads-to-Losing- 
Contacts-and-Conversations-46648 1 .shtml 

30. December 3, Securityweek - (International) DNSimple suffers downtime due to 25 
Gbps DDoS attack. Florida-based DNS provider DNSimple reported that it 
experienced a distributed denial of service (DDoS) attack December 1 that peaked at 25 
Gbps and lasted around 12 hours, causing outages for the company and its customers. 
The company stated that DNSimple was not targeted but was affected by the DDoS 
attack after domains already under attack were delegated to the company. 

Source: http://www.securityweek.com/dnsimple-suffers-downtime-due-25-gbps-ddos- 
attack 

31. December 3, Softpedia - (International) LastPass master password can be decrypted. 
Researchers presenting at the DefCamp 2014 conference during the November 29-30 
weekend demonstrated how an attacker could use a man-in-the-middle (MitM) attack to 
trick users into running a malicious payload that could expose LastPass password 
manager passwords under certain conditions. 

Source: http://news.softpedia.com/news/Saving-LastPass-Master-Password-Locally-Is- 
A-Bad-Idea-466472. shtml 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

32. December 3, Charlottesville Daily Progress - (Virginia) Crash disrupts CenturyLink 
service along U.S. 29 in southern Albemarle. Cellphone and landline services for 
CenturyLink customers in southern Albemarle County were disrupted for around 8 
hours December 3 when a vehicle crashed on U.S. Route 29 South and struck a box 
containing CenturyLink fiber optics. 

Source: http://www.dailvprogress.com/news/local/crash-disrupts-centurvlink-service- 
along-u-s-in-southern-albemarle/article 92cfQ8ce-7b38-lle4-8blO-17928eaf2149.html 

33. December 3, WSBT 22 South Bend - (Indiana) Over 18,000 Frontier customers 
reportedly lose phone service. Frontier Communications crews worked to restore 
phone service in the LaPorte, South Bend, and Valparaiso areas after equipment at then- 
main office failed December 3 affecting over 18,000 customers. 

Source: http://www.wsbt.com/news/local/Over-18-000-Frontier-customers-reportedly- 
lose-phone-service/30034428 
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Commercial Facilities Sector 



34. December 4, WNEP 16 Scranton - (Pennsylvania) Explosion and fire, one woman 
dead, buildings destroyed. A water main break and gas leak in Dunmore December 4 
was suspected to have caused a house explosion which damaged the apartment building 
next to it and prompted about 30 nearby residents to be evacuated. The Lackawanna 
County Head Start preschool program was also canceled December 4 as a warming 
center was set up for affected residents. 

Source: http://wnep.com/2014/12/04/breaking-gas-leak-causes-house-explosion/ 

35. December 4, Bucks County Courier Times - (Pennsylvania) Middletown blaze 
displaces apartment dwellers. Residents from 16 units in the 700 building of the 
Foxwood Manor apartments in Middletown, Pennsylvania, were temporarily displaced 
following a December 3 fire that started in or around an artificial Christmas tree. One 
firefighter and one resident suffered minor injuries. 

Source: 

http://www.buckscountvcouriertimes.com/news/communities/langhorne/middletown- 
blaze-displaces-apartment-dwellers/article 3fb83e6f-5ca8-5e4c-848f- 
7db069c2fbc7.html 
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36. December 4, KPHO 5 Phoenix - (Arizona) 1 wounded in shooting at Scottsdale 
nightclub. Police are searching for a suspect in connection to a December 4 shooting in 
the parking lot of Mint Nightclub in Scottsdale that left 1 person injured after an 
altercation that began inside the nightclub resulted in 2 groups of people being ejected 
from the business. 

Source: http://www.kpho.com/storv/27545512/l-wounded-in-shooting-at-scottsdale- 
nightclub 

37. December 4, Whittier Daily News - (California) Future of La Mirada’s Carriage 
Coffee Shop remains uncertain after fire. A December 2 fire at the Carriage Coffee 
Shop in La Mirada caused hundreds of thousands of dollars in damage and destroyed 
the diner’s kitchen. It is unclear if the business will reopen due to prior proposals to 
close the restaurant. 

Source: http://www.whittierdailynews.com/general-news/20141203/future-of-la- 
miradas -c arriage-coffee- shop-remains -uncertain- after-fire 

38. December 2, Planet Princeton - (New Jersey) Thirty people report gastrointestinal 
illnesses to Princeton health officer after Thanksgiving. The Princeton Health 
Department is investigating after at least 30 patrons of the Nassau Inn reported falling 
ill after eating at the hotel’s restaurant November 27 - November 28. The hotel was 
inspected December 1 and health officials increased surveillance of other restaurants as 
they investigate the cause of the illness. 

Source: http ://planetprinceton.com/20 14/1 2/02/thirty-people-report- gastrointestinal- 
illnesses-to-princeton-health-officer-after-thanks giving/ 
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Dams Sector 

Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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